
Product
Microsoft Teams Notifications Are Now Available in Socket
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.
@fettle/core
Advanced tools
The maintenance-health grading engine behind Fettle: rules, scoring, the GitHub fetch layer, and report assembly.
pnpm add @fettle/core
import { assess, renderMarkdown } from '@fettle/core';
const report = await assess(['acme/api', 'acme/web'], { token: process.env.GITHUB_TOKEN });
console.log(report.fleet.averageScore);
console.log(renderMarkdown(report));
assess fetches, configures and scores. assessContext scores a RepoContext you
already have, with no network involved.
Full documentation, the scoring math, and the report schema: github.com/rumankazi/fettle.
FAQs
Maintenance-health grading engine: rules, scoring, and report assembly.
The npm package @fettle/core receives a total of 46 weekly downloads. As such, @fettle/core popularity was classified as not popular.
We found that @fettle/core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.

Security News
Socket CTO Ahmad Nassri joins AppSec leaders at Black Hat to discuss active malware, package manager risks, and software supply chain defense.